About LanceDBAI advances at the speed of its research, and research moves at the speed of its data. LanceDB is the AI-native Multimodal Lakehouse: one system where a researcher curates petabytes of video, audio, and every signal derived from them with a few lines of Python, and the next training run starts as fast as the next idea. Customers like Runway, Midjourney, and Netflix build the future of AI on LanceDB, from frontier and world models to robots and autonomous vehicles.About the RoleOur first product security-focused engineerTakes high-level direction (e.g., “identify top five security-related gaps for AX”) and drives to resultsSuccess looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the productWhat You’ll DoDrive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the likeSelect, deploy and tune security tooling across all relevant repos and environments, ensuring full coverageApply relevant industry trends, best practices, and specific vulnerabilities to our productWhat We’re Looking For8+ years as a software engineer, with a significant portion of that time working on appsec-related workExperience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancyDemonstrated ability to code in Rust and/or C++Experience building encryption, authentication, and/or authorization features for shipping products at high throughputPrevious experience working at an early-stage startupDemonstrated ownership of ambiguous projects with minimal guidanceStrong written and verbal communication (can drive alignment across teams)Comfortable using data (metrics, experiments, usage) to guide decisionsExperience contributing to or working with open source communitiesPlease apply for this role only if you meet all of the above qualifications, and agree with the day-to-day responsibilities. Of particular note: qualified candidates for this role will have day-to-day coding responsibilities - this is an appsec and devsecops role, not an infosec or platform security role.